The following Fedora EPEL 7 Security updates need testing:
Age URL
109
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-3835d39d1a
unrtf-0.21.9-8.el7
60
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-f9d6ff695a
bibutils-6.6-1.el7 ghc-hs-bibutils-6.6.0.0-1.el7 pandoc-citeproc-0.3.0.1-4.el7
43
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-3c9292b62d
condor-8.6.11-1.el7
34
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-3a3c72c5e5
chromium-68.0.3440.106-3.el7
15
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-3492a96896
myrepos-1.20180726-1.el7
13
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-ac179250ba
gitolite3-3.6.9-1.el7
9
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-c0e0064bf7
moodle-3.1.14-1.el7
8
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-ae9b5a9e70
hylafax+-5.6.1-1.el7
6
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-1141f91524
mozilla-noscript-10.1.9.6-1.el7
6
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-bc87c43cdd
libbson-1.3.5-6.el7
6
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-181645f674
zchunk-0.9.10-1.el7
6
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-2150941371
mbedtls-2.7.6-1.el7
4
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-c5f71cfa34
python-marshmallow-2.0.0-0.7.gita8b3385.el7
The following builds have been pushed to Fedora EPEL 7 updates-testing
cinch-1.2.0-1.el7
dh-make-2.201801-1.el7
libmad-0.15.1b-26.el7
perl-Check-ISA-0.09-7.el7
perl-Data-TreeDumper-0.40-19.el7
perl-Devel-Size-0.82-3.el7
php-tcpdf-6.2.25-1.el7
python-moksha-hub-1.5.13-2.0.1cb025525.el7
python-notario-0.0.14-1.el7
remctl-3.15-1.el7
Details about builds:
================================================================================
cinch-1.2.0-1.el7 (FEDORA-EPEL-2018-fab4e20450)
A tool for provisioning Jenkins components for CI
--------------------------------------------------------------------------------
Update Information:
New upstream 1.2.0
--------------------------------------------------------------------------------
ChangeLog:
* Mon Sep 24 2018 Greg Hellings <greg.hellings(a)gmail.com> - 1.2.0-1
- New upstream 1.2.0
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1631112 - cinch-1.2.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1631112
--------------------------------------------------------------------------------
================================================================================
dh-make-2.201801-1.el7 (FEDORA-EPEL-2018-07961b3f05)
Tool that converts source archives into Debian package source
--------------------------------------------------------------------------------
Update Information:
dh-make-2.201801 is available
--------------------------------------------------------------------------------
ChangeLog:
* Mon Sep 24 2018 S��rgio Basto <sergio(a)serjux.com> - 2.201801-1
- Update to 2.201801 (#1589433)
* Thu Jul 12 2018 Fedora Release Engineering <releng(a)fedoraproject.org> -
2.201701-3
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild
* Wed Feb 7 2018 Fedora Release Engineering <releng(a)fedoraproject.org> -
2.201701-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1589433 - dh-make-2.201801 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1589433
--------------------------------------------------------------------------------
================================================================================
libmad-0.15.1b-26.el7 (FEDORA-EPEL-2018-c906338b6b)
MPEG audio decoder library
--------------------------------------------------------------------------------
Update Information:
Add patches from Kurt Roeckx
--------------------------------------------------------------------------------
ChangeLog:
* Mon Sep 24 2018 Nicolas Chauvet <kwizart(a)gmail.com> - 0.15.1b-26
- Add patches from debian
* Fri Jul 13 2018 Fedora Release Engineering <releng(a)fedoraproject.org> -
0.15.1b-25
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild
* Wed Feb 7 2018 Fedora Release Engineering <releng(a)fedoraproject.org> -
0.15.1b-24
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild
* Thu Aug 3 2017 Fedora Release Engineering <releng(a)fedoraproject.org> -
0.15.1b-23
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild
* Wed Jul 26 2017 Fedora Release Engineering <releng(a)fedoraproject.org> -
0.15.1b-22
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild
* Fri Feb 10 2017 Fedora Release Engineering <releng(a)fedoraproject.org> -
0.15.1b-21
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1477498 - CVE-2017-11552 CVE-2018-7263 libmad: various flaws [epel-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1477498
[ 2 ] Bug #1447358 - CVE-2017-8372 CVE-2017-8373 CVE-2017-8374 libmad: Multiple
vulnerabilities [epel-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1447358
--------------------------------------------------------------------------------
================================================================================
perl-Check-ISA-0.09-7.el7 (FEDORA-EPEL-2018-d01a88c839)
DWIM, correct checking of an object's class
--------------------------------------------------------------------------------
Update Information:
perl-Check-ISA is required by perl-Data-TreeDumper
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1630976 - EPEL-7 branch for perl-Data-TreeDumper?
https://bugzilla.redhat.com/show_bug.cgi?id=1630976
--------------------------------------------------------------------------------
================================================================================
perl-Data-TreeDumper-0.40-19.el7 (FEDORA-EPEL-2018-2db4f7db3a)
Improved replacement for Data::Dumper
--------------------------------------------------------------------------------
Update Information:
perl-Data-TreeDumper is required by rpmdiff
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1630976 - EPEL-7 branch for perl-Data-TreeDumper?
https://bugzilla.redhat.com/show_bug.cgi?id=1630976
--------------------------------------------------------------------------------
================================================================================
perl-Devel-Size-0.82-3.el7 (FEDORA-EPEL-2018-d49d91b06c)
Perl extension for finding the memory usage of Perl variables
--------------------------------------------------------------------------------
Update Information:
perl-Devel-Size is required by perl-Data-TreeDumper
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1630976 - EPEL-7 branch for perl-Data-TreeDumper?
https://bugzilla.redhat.com/show_bug.cgi?id=1630976
--------------------------------------------------------------------------------
================================================================================
php-tcpdf-6.2.25-1.el7 (FEDORA-EPEL-2018-31ccd7aee3)
PHP class for generating PDF documents and barcodes
--------------------------------------------------------------------------------
Update Information:
**Version 6.2.25** - Fix support for image URLs. ---- **Version 6.2.24** -
Support remote urls when checking if file exists. ---- **Version 6.2.23** -
Simplify file_exists function. ---- **Version 6.2.20** - Fix for security
vulnerability: Using the phar:// wrapper it was possible to trigger the
unserialization of user provided data. ---- **Version 6.2.19** - Merge
various fixes for PHP 7.3 compatibility and security.
--------------------------------------------------------------------------------
ChangeLog:
* Mon Sep 24 2018 Remi Collet <remi(a)remirepo.net> - 6.2.25-1
- update to 6.2.25
* Sat Sep 15 2018 Remi Collet <remi(a)remirepo.net> - 6.2.22-1
- update to 6.2.22
* Fri Sep 14 2018 Remi Collet <remi(a)remirepo.net> - 6.2.21-1
- update to 6.2.21
* Fri Sep 14 2018 Remi Collet <remi(a)remirepo.net> - 6.2.19-1
- update to 6.2.19
--------------------------------------------------------------------------------
================================================================================
python-moksha-hub-1.5.13-2.0.1cb025525.el7 (FEDORA-EPEL-2018-e8e544dbe9)
Hub components for Moksha
--------------------------------------------------------------------------------
Update Information:
Temporarily include
https://github.com/mokshaproject/moksha/pull/65 Odds are,
we shouldn't end up pushing this to epel7-stable.
--------------------------------------------------------------------------------
ChangeLog:
* Mon Sep 24 2018 Ralph Bean <rbean(a)redhat.com> - 1.5.13-2.0.1cb025525
- Apply experimental upstream patch for stomp heartbeat handling
https://github.com/mokshaproject/moksha/pull/65
--------------------------------------------------------------------------------
================================================================================
python-notario-0.0.14-1.el7 (FEDORA-EPEL-2018-7f8d3be3e2)
A dictionary validator
--------------------------------------------------------------------------------
Update Information:
Update to latest upstream release, v0.0.14 (rhbz#1592603). See the [upstream
changelog](https://github.com/alfredodeza/notario/blob/master/CHANGELOG.rst) for
details.
--------------------------------------------------------------------------------
ChangeLog:
* Tue Jun 19 2018 Ken Dreyer <ktdreyer(a)ktdreyer.com> 0.0.14-1
- Update to 0.0.14 (rhbz#1592603)
* Tue Jun 19 2018 Miro Hron��ok <mhroncok(a)redhat.com> - 0.0.13-2
- Rebuilt for Python 3.7
* Thu May 17 2018 Ken Dreyer <ktdreyer(a)ktdreyer.com> 0.0.13-1
- Update to 0.0.13 (rhbz#1574272)
- Build py3 on RHEL beyond 7
* Fri Feb 9 2018 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.0.12-3
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild
* Thu Jul 27 2017 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.0.12-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild
* Fri Jul 14 2017 Ken Dreyer <ktdreyer(a)ktdreyer.com> 0.0.12-1
- Update to 0.0.12
- New Source0 URL format
* Sat Feb 11 2017 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.0.11-5
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild
* Mon Dec 19 2016 Miro Hron��ok <mhroncok(a)redhat.com> - 0.0.11-4
- Rebuild for Python 3.6
* Tue Jul 19 2016 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> -
0.0.11-3
-
https://fedoraproject.org/wiki/Changes/Automatic_Provides_for_Python_RPM_...
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1592603 - python-notario-0.0.14 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1592603
--------------------------------------------------------------------------------
================================================================================
remctl-3.15-1.el7 (FEDORA-EPEL-2018-9138800f2c)
Client/server for Kerberos-authenticated command execution
--------------------------------------------------------------------------------
Update Information:
Update to the latest upstream release (3.15). Please see the [upstream
changelog](https://www.eyrie.org/~eagle/software/remctl/news.html) for details
--------------------------------------------------------------------------------
ChangeLog:
* Fri Sep 21 2018 Ken Dreyer <ktdreyer(a)ktdreyer.com> - 3.15-1
- Update to 3.15
- Use HTTPS URLs
- Remove Group tag
- Enable parallel make with smpflags
- Switch to %autosetup
- cherry-pick "Fix passing CFLAGS to PHP configure" from upstream
- set REMCTL_PYTHON_VERSIONS=python2 (rhbz#1606109)
* Sat Jul 14 2018 Fedora Release Engineering <releng(a)fedoraproject.org> - 3.14-3
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild
* Fri Jun 29 2018 Jitka Plesnikova <jplesnik(a)redhat.com> - 3.14-2
- Perl 5.28 rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1606109 - remctl: FTBFS in F29: /bin/sh: line 2: python: command not found
https://bugzilla.redhat.com/show_bug.cgi?id=1606109
--------------------------------------------------------------------------------